I also created a Generic Member
that is allowed to read everything, but can edit only inside Notes and its subdirectories.
Internal; CostNet